cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
139
Views
0
Helpful
0
Replies

CSCvy68283 Security alert when submitting a Misclassification request

martin.schires
Level 1
Level 1

So, the issue isn't stated quite accurately. We block uncategorized sites. The proxy EUN includes a "button" that allows people to submit a misclassification report directly to Cisco via the proxy p2 interface (http://) . If a person attempts to access an uncategorized site that is https://  and clicks the misclassification button they will now receive a "The information you’re about to submit is not secure" message.   Yes, they can click "send anyway" button on that message.. but people have been trained that this is a bad thing to do because it is.

 

Cisco devs should have had the foresight to have fixed this in AsyncOS long ago. The misclassification request only works using http://.  Google has been warning this was coming for years.  Now that Edge uses the same engine, it also displays this message. It has rendered the feature virtually useless, so we receive dozens of support requests per day for unclassified sites.

 

We've been told that they are now working on addressing this, but what to we do in the mean time?

 

Cisco, please research how to "tell" chrome that the p2 interface ip addresses are "ok".  I've found nothing that works.  I'll be submitted a TAC as well, but thought I'd post here in case someone already knows a workaround for this. 

 

Thanks!

0 Replies 0